Overview
overview
6Static
static
5Extras/Aut...tX.chm
windows10-2004-x64
1Extras/Aut...tX.chm
windows11-ltsc_2024-x64
1Extras/Aut...ly.dll
windows10-2004-x64
1Extras/Aut...ly.dll
windows11-ltsc_2024-x64
1Extras/Aut...ll.dll
windows10-2004-x64
1Extras/Aut...ll.dll
windows11-ltsc_2024-x64
1Extras/Aut...X3.dll
windows10-2004-x64
3Extras/Aut...X3.dll
windows11-ltsc_2024-x64
3Extras/Aut...64.dll
windows10-2004-x64
5Extras/Aut...64.dll
windows11-ltsc_2024-x64
5Extras/Aut...It.ps1
windows10-2004-x64
6Extras/Aut...It.ps1
windows11-ltsc_2024-x64
6Extras/Edi...es.htm
windows10-2004-x64
3Extras/Edi...es.htm
windows11-ltsc_2024-x64
3Extras/Edi...t3.key
macos-10.15-amd64
1Extras/Edi...t3.ps1
windows10-2004-x64
6Extras/Edi...t3.ps1
windows11-ltsc_2024-x64
6Extras/Edi...es.htm
windows10-2004-x64
3Extras/Edi...es.htm
windows11-ltsc_2024-x64
3Extras/Edi..._v3.js
windows10-2004-x64
3Extras/Edi..._v3.js
windows11-ltsc_2024-x64
3Extras/Exa...ic.ps1
windows10-2004-x64
6Extras/Exa...ic.ps1
windows11-ltsc_2024-x64
6Extras/Exa...et.xls
windows10-2004-x64
1Extras/Exa...et.xls
windows11-ltsc_2024-x64
1Extras/Exa...rd.ps1
windows10-2004-x64
6Extras/Exa...rd.ps1
windows11-ltsc_2024-x64
6Extras/Exa...ll.ps1
windows10-2004-x64
6Extras/Exa...ll.ps1
windows11-ltsc_2024-x64
6Extras/Exa...2].ps1
windows10-2004-x64
6Extras/Exa...2].ps1
windows11-ltsc_2024-x64
6Extras/Exa...ib.ps1
windows10-2004-x64
6Analysis
- max time kernel
148s - max time network
144s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
02/10/2026, 10:06
Static task
static1
Behavioral task
behavioral1
Sample
Extras/AutoItX/AutoItX.chm
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral2
Sample
Extras/AutoItX/AutoItX.chm
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral3
Sample
Extras/AutoItX/AutoItX3.Assembly.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral4
Sample
Extras/AutoItX/AutoItX3.Assembly.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral5
Sample
Extras/AutoItX/AutoItX3.PowerShell.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral6
Sample
Extras/AutoItX/AutoItX3.PowerShell.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral7
Sample
Extras/AutoItX/AutoItX3.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral8
Sample
Extras/AutoItX/AutoItX3.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral9
Sample
Extras/AutoItX/AutoItX3_x64.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral10
Sample
Extras/AutoItX/AutoItX3_x64.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral11
Sample
Extras/AutoUpdateIt/AutoSQLiteUpdateIt.ps1
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral12
Sample
Extras/AutoUpdateIt/AutoSQLiteUpdateIt.ps1
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral13
Sample
Extras/Editors/Crimson/Manual Install and Notes.htm
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral14
Sample
Extras/Editors/Crimson/Manual Install and Notes.htm
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral15
Sample
Extras/Editors/Crimson/autoit3.key
Resource
macos-20260915-en
macos-10.15-amd64
Behavioral task
behavioral16
Sample
Extras/Editors/PSPad/AutoIt3.ps1
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral17
Sample
Extras/Editors/PSPad/AutoIt3.ps1
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral18
Sample
Extras/Editors/TextPad/Manual Install and Notes.htm
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral19
Sample
Extras/Editors/TextPad/Manual Install and Notes.htm
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral20
Sample
Extras/Editors/TextPad/autoit_v3.js
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral21
Sample
Extras/Editors/TextPad/autoit_v3.js
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral22
Sample
Extras/Examples/COM/Scriptomatic.ps1
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral23
Sample
Extras/Examples/COM/Scriptomatic.ps1
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral24
Sample
Extras/Examples/COM/Worksheet.xls
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral25
Sample
Extras/Examples/COM/Worksheet.xls
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral26
Sample
Extras/Examples/GUI/Advanced/msgboxwizard.ps1
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral27
Sample
Extras/Examples/GUI/Advanced/msgboxwizard.ps1
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral28
Sample
Extras/Examples/Helpfile/Call.ps1
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral29
Sample
Extras/Examples/Helpfile/Call.ps1
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral30
Sample
Extras/Examples/Helpfile/Enum[2].ps1
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral31
Sample
Extras/Examples/Helpfile/Enum[2].ps1
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral32
Sample
Extras/Examples/Helpfile/FileGetAttrib.ps1
Resource
win10v2004-20260911-en
windows10-2004-x64
General
- Target Extras/AutoItX/AutoItX.chm
- Size 195KB
- Sample261002-l5ghmafd73
- SHA256 3f8cdc4609d70414239b578b5f87f495b5dbd1e1133d5d05d94b39258b807eda
- MD5 592e7a5c737c2d51c4a9905c92e04a20
- SHA1 7cdaf547bbac165549e99ccd371e838180c1ab35
- SHA512 8cb2f86ee8e00ae232d5a071f6d60f3c6b4c27d1328073a1ac82aa639bbf009eefeffdb464e770ea26d34a7fc9393741b6dc2f8b8dc32df36302631792b5f667
- SSDEEP 6144:p3ximAlAnCm7subS6XSPrIItAv+IHDSmVI7/j:xsLllmxbS6QrNAv+IH2mV0j
- TLSH T1DE140209813FF932E878DFBA33868E6D62D0CC1955DE2E09E465526A80D7FCC7421D9B
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 5044 hh.exe - Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 5044 hh.exe 5044 hh.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Roaming\Microsoft\HTML Help\hh.dat
- Size 8KB
- SHA256 c5caafbf66da02f0085f287abaf199a74bf1e4e4fe9266d62f0954537ad84bbd
- MD5 9e97d131727049962fd22770322b31a8
- SHA1 23ad9f4096629c8f90f551a99d02f85e1c040212
- SHA512 5ebf3365190f83d7afcc91805b4ee3837d58361737aeb50bc878995e9f27988d7c1df7cd65c55b51f00957e389272609b96916efb6a92a103951a6228f6a6dcf
- SSDEEP 12:1Im6ysNMqiNMvyc0Ke0l6eohI+KKe+KjK9zh+KlE/KlEvt+KlEvdX:kx5yc0JQ1V2FlEClEvt1lEvdX
- TLSH T151026D3072208120E00D8B37FFDB958B75257D42AE94451B300EF75E45B9E0E5BB05EE
- MD5 SHA1 SHA512 SSDEEP TLSH